This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa File: PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa (raw, json) Hash identifier: ECesKQ6eT4CAViBPjtKG3epmntO2VSEJzUCQqkLEU1U= Subject key identifier: 3D:94:C7:5C:93:9E:E9:1B:9B:DB:F0:77:E5:0A:7F:5D:69:B5:9C:22 Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Certificate serial: 019B797E57888FAC1B0BF9BAF5A642939F9D Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa Signing time: Thu 01 Jan 2026 12:18:01 +0000 ROA not before: Thu 01 Jan 2026 12:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43627 IP address blocks: 77.90.85.0/24 maxlen: 24 77.90.86.0/23 maxlen: 24 77.90.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:57:88:8f:ac:1b:0b:f9:ba:f5:a6:42:93:9f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31 Validity Not Before: Jan 1 12:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d94c75c939ee91b9bdbf077e50a7f5d69b59c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4e:1c:8d:9f:cc:0e:66:65:d4:00:e9:f1:9b: d2:2e:4a:44:8a:59:8c:82:f7:d0:4d:50:5e:69:15: 40:08:a3:c6:4f:a6:79:e6:c2:51:3a:d6:63:fc:14: 6f:d4:6f:f0:ca:2b:8d:8b:42:6c:20:ac:85:81:7b: 8f:3e:aa:63:0c:78:cb:03:f1:c1:ff:d0:28:df:10: ce:c3:6c:ac:53:46:08:83:56:84:f0:5f:fa:20:10: 82:03:aa:69:67:f9:5e:da:80:9c:7d:7e:5e:fa:07: 2d:d6:77:74:1a:0d:88:6a:c9:c1:36:cf:f6:c2:18: 96:75:d1:15:ab:bc:8c:01:9c:a7:c0:bc:4d:fb:37: 0c:9e:79:1e:b6:2f:6e:a2:66:39:05:a2:e3:dc:94: b8:a5:ee:a0:93:f1:d3:0f:13:e9:65:82:18:a6:11: fd:51:b2:7c:2f:24:33:a9:82:f1:51:9b:04:57:a5: 2c:5a:1b:d3:a8:42:5e:3e:e7:16:b4:ce:41:a9:68: e4:4e:41:7b:c9:da:29:a3:a3:65:af:65:12:18:5b: 9c:89:e4:8d:27:53:65:8b:ce:c9:13:22:17:7f:5f: bd:35:1f:6f:8c:a6:49:1c:5b:0e:b1:46:82:a8:a6: aa:b0:79:0a:3f:f4:bd:60:c4:35:10:04:e4:95:f0: aa:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:C7:5C:93:9E:E9:1B:9B:DB:F0:77:E5:0A:7F:5D:69:B5:9C:22 X509v3 Authority Key Identifier: keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/PZTHXJOe6Rub2_B35Qp_XWm1nCI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.90.85.0-77.90.91.255 Signature Algorithm: sha256WithRSAEncryption 3e:b4:19:23:ba:dc:8b:10:52:67:72:51:d9:92:7f:62:74:12: 79:6f:9f:4e:05:22:3f:59:f7:76:46:4f:31:59:df:7c:3a:f6: c8:69:6a:b4:b8:be:99:c5:54:72:cd:90:b2:15:75:2a:47:1a: a1:7e:48:f2:0d:79:0f:1e:f1:c2:d7:da:2e:6b:2a:08:11:8c: 51:32:2e:fe:f0:8f:e9:0d:8b:be:a8:15:ba:2f:3a:29:88:00: d8:20:83:73:9b:af:96:e8:bd:98:bb:b7:78:1d:a0:e0:d2:c5: 7b:dd:29:83:68:4e:57:4b:bb:19:0e:1b:3d:b3:f7:fb:01:b9: 35:ef:82:b9:b7:01:af:71:96:0a:c9:b6:37:6c:f0:26:e4:ed: 08:6c:f6:31:15:54:da:00:07:e8:63:ef:f3:ee:a5:7e:40:c1: eb:99:1c:f6:37:b7:04:5d:fb:b1:55:af:05:0d:da:95:1f:6d: 66:cc:88:e3:c0:37:de:1a:be:fd:7a:ab:78:86:48:64:c9:4e: 9f:6f:09:95:a2:b9:d3:62:fd:89:ad:dc:9b:68:2f:a7:0f:ff: f0:27:36:29:e8:68:9b:8b:32:eb:b2:41:9d:5d:76:c6:cf:4d: 0b:4b:29:ef:a1:b3:c7:91:44:a0:3a:a4:50:fa:c4:7d:c3:13: d0:d3:f8:6b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fleIj6wbC/m69aZCk5+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhZDc5NGFjNjAxY2UyNTA1YjY1Zjk3NWE3ZDUxNmEyZjAw YTViMzEwHhcNMjYwMTAxMTIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDk0Yzc1YzkzOWVlOTFiOWJkYmYwNzdlNTBhN2Y1ZDY5YjU5YzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA304cjZ/MDmZl1ADp8ZvSLkpEilmM gvfQTVBeaRVACKPGT6Z55sJROtZj/BRv1G/wyiuNi0JsIKyFgXuPPqpjDHjLA/HB /9Ao3xDOw2ysU0YIg1aE8F/6IBCCA6ppZ/le2oCcfX5e+gct1nd0Gg2IasnBNs/2 whiWddEVq7yMAZynwLxN+zcMnnketi9uomY5BaLj3JS4pe6gk/HTDxPpZYIYphH9 UbJ8LyQzqYLxUZsEV6UsWhvTqEJePucWtM5BqWjkTkF7ydopo6Nlr2USGFucieSN J1Nli87JEyIXf1+9NR9vjKZJHFsOsUaCqKaqsHkKP/S9YMQ1EATklfCqEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD2Ux1yTnukbm9vwd+UKf11ptZwiMB8GA1UdIwQY MBaAFMrXlKxgHOJQW2X5dafVFqLwClsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMt M2I5ODhmMTg4ZDkxLzEvUFpUSFhKT2U2UnViMl9CMzVRcF9YV20xbkNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9mOWE0YmUtZDc5Yy00MTkyLWE2YjMtM2I5ODhmMTg4ZDkx LzEveXRlVXJHQWM0bEJiWmZsMXA5VVdvdkFLV3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNWlUD BAJNWlgwDQYJKoZIhvcNAQELBQADggEBAD60GSO63IsQUmdyUdmSf2J0Enlvn04F Ij9Z93ZGTzFZ33w69shparS4vpnFVHLNkLIVdSpHGqF+SPINeQ8e8cLX2i5rKggR jFEyLv7wj+kNi76oFbovOimIANggg3Obr5bovZi7t3gdoODSxXvdKYNoTldLuxkO Gz2z9/sBuTXvgrm3Aa9xlgrJtjds8Cbk7Qhs9jEVVNoAB+hj7/PupX5AweuZHPY3 twRd+7FVrwUN2pUfbWbMiOPAN94avv16q3iGSGTJTp9vCZWiudNi/Ymt3JtoL6cP //AnNinoaJuLMuuyQZ1ddsbPTQtLKe+hs8eRRKA6pFD6xH3DE9DT+Gs= -----END CERTIFICATE-----Generated at Wed Jan 21 08:37:00 2026 by rpki-client